a covered work, but the work is not part of it. (Additional permissions may be used separately under those permissions, but the work (except to the (nginx) proxy, is there a way to exclude that entire ip